Note that you risk reinfection if the attacker can somehow retain access while you rotate out secrets...